Enterprise Security Tech

A new phishing campaign is quietly turning everyday “free reward” emails into a global data theft machine, according to fresh research from KnowBe4 Threat Labs. Security analysts say the operation blends high-volume email distribution with polished brand impersonation and behavioral psychology to extract credit card details and personal data from victims at scale. The campaign revives a familiar lure. Users receive emails promising high-end prizes like smartphones or headphon

Ransomware activity remains stubbornly high in 2026, even as monthly volumes fluctuate, according to new threat intelligence from NCC Group. The firm recorded 748 global ransomware incidents in April, a slight decline from March but still part of a broader trend that shows attackers operating at a higher baseline than last year. That shift reflects something more structural than a temporary spike. The ransomware-as-a-service economy has matured into a repeatable, scalable bus

As enterprises rapidly deploy autonomous AI agents across internal systems, cybersecurity teams are struggling to control how those agents access sensitive corporate data. TrustLogix announced a major expansion of its TrustAI platform aimed at solving that problem with real-time AI governance controls at the data layer. The new release introduces several capabilities designed for enterprise AI security, including a runtime “kill switch” that allows organizations to instantly

As enterprises struggle to keep pace with a sharp rise in vulnerabilities uncovered by advanced AI systems, cybersecurity firm ArmorCode is introducing a new approach that reframes how security teams operate in an AI-driven threat landscape. The company announced Anya Agents, a framework of task-specific AI workers designed to integrate directly into enterprise security workflows. Built on its proprietary platform, the release signals a broader shift away from passive AI assi

A new phase in software supply chain attacks is unfolding across the JavaScript ecosystem, as publicly released worm code fuels a surge of low-effort but highly effective malicious packages on npm. Security researchers warn that what began as a proof of concept has quickly evolved into a scalable attack model that favors speed over sophistication. The shift follows the public release of the Shai-Hulud worm source code, which has enabled copycat attackers to rapidly deploy var

A series of cyber intrusions into fuel monitoring systems at gas stations across the United States is raising new alarms about the fragility of industrial control systems that quietly underpin critical infrastructure. U.S. officials and private sector experts believe the activity may be linked to Iran, though attribution remains uncertain due to limited forensic evidence. The attacks focus on automatic tank gauge systems, or ATGs, which track fuel levels in storage tanks at g